Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: t086mbIg3p6oJqXF69VgesO97rmBHmS0p9Knv+UBK94=
Subject key identifier: 6E:6C:24:62:56:2A:6E:5E:F9:33:4E:09:1D:D7:9C:30:1D:D0:AA:6A
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 0194BC04B6117A98D5AA82DECF68EC883D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 05ED
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 4NykHTKnfSIJ0q7_RZtsAwpsqKA.roa (hash: w55fxLVLcagKRRaTKAUle3eBEN7JDI5LPLVo9zNJXVU=)
2: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: YPmqNGhFICFzyXOIjE0mKUCoEpcp68J7LIvMDC79TyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:11:7a:98:d5:aa:82:de:cf:68:ec:88:3d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=6e6c2462562a6e5ef9334e091dd79c301dd0aa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:9a:58:9c:c3:b2:b9:ad:30:b5:0f:22:c7:
c1:1c:7e:3f:5a:f0:f3:8f:ff:0f:9d:92:ad:f1:8e:
86:3d:ff:fa:42:91:67:da:eb:f8:9d:76:18:f7:f0:
f3:06:b8:48:27:9b:cb:7d:80:24:53:e1:72:fc:d6:
db:59:b8:e3:b1:61:ee:37:71:52:71:06:94:db:39:
9b:98:bc:a6:03:f9:0f:2b:76:f7:cf:2a:0a:42:c4:
08:40:2c:14:00:42:ac:3c:a1:9e:cb:a6:61:db:d2:
3e:f1:05:97:2d:f6:eb:6b:de:5f:6b:ad:31:c3:aa:
fd:ed:74:bf:f2:fa:32:c8:c4:19:11:d4:aa:e1:22:
72:29:5b:51:4e:2b:d9:bc:4c:1d:43:8c:50:05:ed:
dd:27:d9:06:11:79:9d:4a:22:97:62:27:15:24:e2:
58:da:95:84:72:e5:bd:41:0a:77:ba:a4:d6:73:d7:
81:1b:00:83:76:77:37:61:30:b3:1a:43:fe:07:69:
af:f0:d2:37:ab:cd:71:09:e2:d7:3e:11:54:fe:31:
be:b1:09:e8:33:07:bb:17:21:00:a8:d5:bd:03:9e:
1e:7d:91:c5:10:84:42:4e:34:d4:2f:ac:d3:fc:86:
56:bf:0c:2c:22:2e:66:5e:23:13:65:03:31:59:ad:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6C:24:62:56:2A:6E:5E:F9:33:4E:09:1D:D7:9C:30:1D:D0:AA:6A
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:ee:9f:5a:11:2f:b1:6c:31:ee:36:9c:77:1c:7a:73:3c:
73:bb:e2:d5:7b:0f:4f:39:36:5c:95:0d:5d:f3:df:61:06:9c:
dc:ce:0c:54:63:98:1e:d8:8d:ff:10:4d:b5:96:fa:90:4b:81:
20:92:cd:a9:e1:77:5d:c1:bc:e9:78:0f:7a:c1:1e:62:b6:48:
66:d6:66:91:bd:0a:53:35:ac:f5:44:b9:ee:e3:e3:3d:8f:be:
5d:2c:d8:b6:0d:ff:07:5b:4c:62:eb:14:e9:33:8f:52:a6:80:
ef:2d:cc:8c:44:c7:ef:4f:41:b3:72:66:ec:51:95:cb:af:a1:
ff:45:6c:ff:1e:8a:3b:bf:c3:96:85:91:52:43:be:61:70:73:
6d:f0:11:ab:41:6b:72:e4:48:07:10:d2:d9:5d:82:32:bd:49:
40:00:f0:75:78:f2:2b:4f:4f:77:a1:fb:36:04:51:41:47:36:
ac:3d:45:50:48:78:32:36:57:af:3d:12:a7:96:c2:de:8d:0a:
ee:e2:26:c6:00:8c:51:92:a0:b8:be:21:e0:b6:b5:d6:33:13:
fb:b1:97:5c:88:84:cc:e8:b8:5b:7e:9e:53:aa:d8:06:51:80:
5c:d5:0c:93:04:37:3e:83:74:00:2b:27:59:2d:48:39:20:16:
3e:f1:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:25 2025 by rpki-client